$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: aE2coJ514bzokocdXRWv224oT7UiimxX8yP9Nai5gIQ= Subject key identifier: CB:EE:FB:25:E1:98:0D:2B:1E:7D:AA:A2:48:9E:F2:CA:1C:D1:ED:74 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 0414 Signing time: Fri 19 Sep 2025 00:48:30 +0000 Manifest this update: Fri 19 Sep 2025 00:48:30 +0000 Manifest next update: Fri 26 Sep 2025 00:48:30 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: llGhfcoupBNC3vwd6kpFrg6RXooDPHT9B7y+cxAcN+I=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Sep 19 00:48:30 2025 GMT Not After : Sep 26 00:48:30 2025 GMT Subject: CN=68cca85e-ba07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:01:9a:ab:f9:11:45:2f:61:e5:59:77:e5: 0a:25:fd:22:ae:9f:f7:30:a5:db:9c:e1:f0:d4:27: 6a:47:91:ec:27:9a:bc:21:77:4f:f9:92:7c:b7:3d: ac:ba:8a:7a:51:d3:57:3b:8c:cd:91:69:d6:a2:b7: 48:5d:e1:c8:ff:51:d4:30:66:58:99:fa:53:61:50: 75:35:c1:7d:29:69:74:0f:6a:30:ed:8d:bf:ad:f4: 93:b0:eb:1a:20:5f:79:17:23:62:1c:2e:44:c2:9e: 1f:93:a2:25:22:6e:a7:fd:7d:cd:c6:8a:06:76:38: 07:ef:eb:2c:56:48:db:67:fd:76:93:6f:41:dc:d5: 8f:ba:d3:0a:71:32:0a:7a:e4:8d:f7:70:39:bf:cc: 1b:b7:9d:ce:97:41:db:8b:6b:08:e4:7a:0f:6f:95: d7:a6:e1:45:b1:7c:d7:b0:26:ec:18:c2:2e:53:49: fe:d8:78:59:8c:70:42:70:ea:df:ad:6b:ad:ea:15: b3:6e:01:be:ea:d2:9a:20:4a:ee:b4:d0:b9:fa:8a: b8:e5:c6:bd:a8:3a:59:15:ff:1d:00:be:04:69:6d: 42:30:05:68:65:cc:b9:e4:f8:b2:c0:5c:53:d6:fa: f1:cf:89:ac:79:c4:89:35:26:c2:2c:bd:4c:6e:5d: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:FB:25:E1:98:0D:2B:1E:7D:AA:A2:48:9E:F2:CA:1C:D1:ED:74 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f3:f2:4b:13:2e:ef:45:8c:7f:d5:27:af:c9:99:50:32:13: 3a:42:85:43:77:aa:3c:2c:3b:a3:47:a7:50:2a:5a:29:6f:59: 47:5f:81:4b:0d:30:10:1e:34:85:be:b8:66:5d:55:b5:94:c5: 3e:24:e7:a8:a0:3d:5d:1a:a9:da:61:23:0f:0e:f1:55:e3:c2: ea:09:87:7c:74:05:60:74:4e:c1:a2:9d:f6:5b:cf:54:62:29: ab:ca:7d:5e:b2:56:b2:ea:8b:63:b7:0a:0f:1a:21:b5:71:d0: de:9b:a2:6f:e5:16:8e:ac:1f:b5:23:35:51:e9:8d:43:4d:8f: 69:68:3c:57:05:6d:00:16:f5:ae:18:b2:c1:9c:cf:d0:9e:ee: 6e:58:0a:ea:72:3b:3a:bf:f5:eb:ac:29:8f:ce:f0:c6:c6:b4: 03:d0:00:60:33:c3:13:f8:25:c6:97:38:e2:db:3c:25:72:4e: 13:94:2c:cb:bd:1e:ad:90:43:6d:92:1c:6d:9d:f6:b9:f2:43: d5:2e:cd:f9:b3:9a:90:b2:c0:d5:a6:c7:b0:cb:5c:9e:ca:63: 9b:a2:39:a8:54:4d:40:ef:00:fb:f2:1c:0f:07:46:e0:a1:fb: 4d:ce:53:17:64:f6:17:8a:2b:b8:cd:41:0e:53:24:16:c9:22: b2:b8:17:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUwOTE5MDA0ODMwWhcNMjUwOTI2MDA0ODMwWjAYMRYwFAYD VQQDEw02OGNjYTg1ZS1iYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycgBmqv5EUUvYeVZd+UKJf0irp/3MKXbnOHw1CdqR5HsJ5q8IXdP+ZJ8tz2s uop6UdNXO4zNkWnWordIXeHI/1HUMGZYmfpTYVB1NcF9KWl0D2ow7Y2/rfSTsOsa IF95FyNiHC5Ewp4fk6IlIm6n/X3NxooGdjgH7+ssVkjbZ/12k29B3NWPutMKcTIK euSN93A5v8wbt53Ol0Hbi2sI5HoPb5XXpuFFsXzXsCbsGMIuU0n+2HhZjHBCcOrf rWut6hWzbgG+6tKaIErutNC5+oq45ca9qDpZFf8dAL4EaW1CMAVoZcy55PiywFxT 1vrxz4msecSJNSbCLL1Mbl2c8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvu+yXh mA0rHn2qokie8soc0e10MB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa8/JLEy7vRYx/1SevyZlQMhM6QoVDd6o8LDujR6dQKlopb1lHX4FL DTAQHjSFvrhmXVW1lMU+JOeooD1dGqnaYSMPDvFV48LqCYd8dAVgdE7Bop32W89U Yimryn1eslay6otjtwoPGiG1cdDem6Jv5RaOrB+1IzVR6Y1DTY9paDxXBW0AFvWu GLLBnM/Qnu5uWArqcjs6v/XrrCmPzvDGxrQD0ABgM8MT+CXGlzji2zwlck4TlCzL vR6tkENtkhxtnfa58kPVLs35s5qQssDVpsewy1yeymObojmoVE1A7wD78hwPB0bg oftNzlMXZPYXiiu4zUEOUyQWySKyuBdk -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:18 2025 by rpki-client